The cybersecurity landscape has witnessed dramatic escalation in hacktivist activities targeting U.S. infrastructure following geopolitical tensions in the Middle East. Following U.S. airstrikes on Iranian nuclear facilities on June 21, 2025, multiple pro-Iranian hacktivist groups launched coordinated distributed denial-of-service (DDoS)…
Tag: Cyber Security News
Threat Actors Distribute Hacked Version of SonicWall’s SSL VPN NetExtender to Steal Sensitive Data
Cybersecurity researchers have uncovered a sophisticated malware campaign targeting SonicWall’s SSL VPN NetExtender users through a meticulously crafted Trojanized version of the legitimate remote access software. The malicious campaign, operating through impersonated websites, distributes a modified version of NetExtender 10.3.2.27…
Chrome Security Update: Patch for 11 Vulnerabilities Enabling Malicious Code Execution
Google Chrome has released a critical security update addressing 11 vulnerabilities that could potentially allow malicious code execution on user systems. The Chrome 138.0.7204.49 stable channel update, announced on Tuesday, June 24, 2025, represents a significant security milestone as the…
Threat Actors Poison Search Results & Exploits Popularity of ChatGPT and Luma AI to Deliver Malicious Payloads
Cybercriminals are increasingly exploiting the widespread fascination with artificial intelligence tools, leveraging the popularity of platforms like ChatGPT and Luma AI to orchestrate sophisticated malware distribution campaigns. These threat actors have developed an intricate web of deceptive websites designed to…
CISA Releases Guide to Reduce Memory Safety Vulnerabilities in Modern Software Development
The CISA and the NSA have jointly released a comprehensive guide addressing one of the most persistent and dangerous classes of software vulnerabilities: memory safety issues. Published in June 2025, the document “Memory Safe Languages: Reducing Vulnerabilities in Modern Software…
Critical Kibana Vulnerabilities Allows Heap Corruption and Remote Code Execution
A severe heap corruption vulnerability in Kibana could let attackers achieve remote code execution using specially crafted HTML pages. The vulnerability, designated as CVE-2025-2135, stems from a Type Confusion flaw in the underlying Chromium engine and carries a maximum CVSSv3.1…
Linux CentOS Web Panel Vulnerability Let Attackers Execute Malicious Remote Code – PoC Released
A critical security vulnerability in CentOS Web Panel (CWP) has been discovered that allows unauthenticated remote attackers to execute arbitrary commands on affected servers. The flaw, tracked as CVE-2025-48703, affects one of the most widely used free web hosting control…
Akamai Shares New Techniques for Defenders to Shutdown Cryptominer Attacks
Cybersecurity researchers at Akamai have unveiled groundbreaking defensive techniques capable of completely shutting down cryptomining botnets, marking a significant advancement in the fight against cryptocurrency-based cybercrime. The innovative approach, detailed in the final installment of Akamai’s “Cryptominers’ Anatomy” blog series,…
New U.S. Visa Rule Requires Applicants to Change Social Media Accounts Privacy to Public
The United States has introduced a sweeping new requirement for all applicants seeking F, M, or J nonimmigrant visas: effective immediately, individuals must set the privacy settings of all their personal social media accounts to “public” before submitting their visa…
NVIDIA Megatron LM Vulnerability Let Attackers Inject Malicious Code
Critical security vulnerabilities in NVIDIA Megatron LM large language model framework that could allow attackers to inject malicious code and gain unauthorized system access. The company released emergency security patches on June 24, 2025, addressing two high-severity vulnerabilities that affect…